Windows File Protection window appears after XP loads up
auberge
after all the updates were installed. When XP booted up, a window appeared
with a "Windows File Protection" titlebar, and gave a message, "Please wait
while Windows verifies that all protected Windows files are intact and in
their original versions." Following this a second window appears asking for
the "Windows XP Professional SP2 CD", with "Retry", "More Information" and
"Cancel" buttons. If you select "Cancel", a third window appears with the
message, "If you cancel, Windows might require you to insert a CD later. Are
you sure you want to skip this file" and shows "Yes" & "No" buttons.
If you click on the "Close" on the first window, the above is terminated
till the next re-boot. I never had this appearing till this update had been
done. It is a bit of a nuisance. Any info on how to get rid of this.
auberge
MowGreen [MVP]
'stuck' and Windows File Protection detected said system file is missing
and/or it's backup in WINDOWS\system32\Dllcache is inconsistent with the
system file that was replaced or has been corrupted .
The second window is the System File checker attempting to rectify this
issue. Have you tried inserting the CD ?
That may resolve this issue but ... if the update involved is trying to
replace a system file [EX: explorer.exe], said update will not be
installed properly.
The usual culprits for this issue would be either the installed
antivirus/security suite, other 3rd party security software
[EX: Spybot], or 3rd party Windows themes or skins.
MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============
auberge
I do have Mcafee, Ad-aware and Spybot on my laptop, but only Mcafee loads on
boot-up. I have set up the other 2 not to lad on boot-up.
However Mowgreen, there is a file definitely missing, as you say, b'cos a
message appears on a blue screen just after the XP splash screen completes
its load up. Totally forgot to add this in when I had initially posted the
thread. The message says, "SystemRoot/Windows/System32/Autochk.exe - program
not found. Skipping Autochk."
Could this be the cause of the problem? How could it be resolved?
MowGreen [MVP]
see if that stops the autochk.exe message.
Chkdsk.exe or Autochk.exe starts when you try to shut down or restart
your computer
http://support.microsoft.com/kb/831426
Manually resetting AUTOCHK.EXE for a drive
http://searchwinit.techtarget.com/tip/0,289483,sid1_gci990696,00.html
http://www.kellys-korner-xp.com/regs_edits/disablecheckdisk.reg
auberge
==================
MowGreen [MVP]
See : Manual steps to run Chkdsk at the command prompt
Suggest you run chkdsk /r
Also, if there is an issue getting chkdsk to run, see:
Error message when you try to start a Windows XP-based computer:
"Autocheck program not found"
http://support.microsoft.com/kb/913502
auberge
plain "chkdsk" ran straight away. Re-booted and the chkdsk/f took off after
the XP splash screen. All 3 stages were seen as OK. Still the file
protection window on boot-up. Ran "regedit" on the path
"HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session
Manager\BootExecute". Noticed 2 "Session Manager's " -- One with a space
between the 2 words ,and one without any space between the 2 words. At
BootExecute noted the data to show 6 rectangular boxes, no alphanumeric data.
Accessed "http://support.microsoft.com/kb/913502" and carried out the
procedure to get the "autochk.exe" into "system32" -- size=575KB, Date =
Aug 04, 2004, 5:30:00PM. Re-booted - "Autochk.exe" missing error did not
come up, but the Windows File Protection Window still came up. Again ran a
"chkdsk/f" and re-booted for it to run - still all 3 stages were OK, but the
Windows File Protection Window was still there when windows loaded up. Again
accessed the reigistry, and BootExecute still showed the 6 rectangular boxes.
Should I do modification of the "Session Manager Registry" as given in
KB831426? Keeping all registry stuff for the absolute last.
Thanks for your help so far.
MowGreen [MVP]
> I ran a "chkdsk/f". There was a message that it would run at re-boot. The
> plain "chkdsk" ran straight away. Re-booted and the chkdsk/f took off after
> the XP splash screen. All 3 stages were seen as OK. Still the file
> protection window on boot-up. Ran "regedit" on the path
> "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session
> Manager\BootExecute". Noticed 2 "Session Manager's " -- One with a space
> between the 2 words ,and one without any space between the 2 words. At
> BootExecute noted the data to show 6 rectangular boxes, no alphanumeric data.
>
> Accessed "http://support.microsoft.com/kb/913502" and carried out the
> procedure to get the "autochk.exe" into "system32" -- size=575KB, Date =
> Aug 04, 2004, 5:30:00PM. Re-booted - "Autochk.exe" missing error did not
> come up, but the Windows File Protection Window still came up. Again ran a
> "chkdsk/f" and re-booted for it to run - still all 3 stages were OK, but the
> Windows File Protection Window was still there when windows loaded up. Again
> accessed the reigistry, and BootExecute still showed the 6 rectangular boxes.
>
>
> Should I do modification of the "Session Manager Registry" as given in
> KB831426? Keeping all registry stuff for the absolute last.
>
> Thanks for your help so far.
>
>
You're mowst welcome. Yes, the Data for BootExecute is wrong/corrupted.
This is what it should look like and be set to -
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session
Manager\BootExecute
Name Type Data
BootExecute REG_MULTI_SZ autocheck autochk*
Perhaps a 3rd party disk tool caused the corruption ?
STRONLY suggest you back up the Session Manager subkey by right
clicking it and choosing Export prior to editing BootExecute, auberge.
auberge
blue screen appeared showing the message, "autochk* - file not found.
Skipping Autocheck.exe". After windows loaded, the Windows File Protection
window came up again. Checked thru Windows explorer and noted that there was
a "autochk.exe" in C:\WINDOWS\system32, with the file properties as mentioned
yesterday.
Manually copied the "autochk.exe" file from the XP cd to another directory.
This file showed different properties from those of the one in system32. The
system32 file (which had been copied from the CD) showed a version of
5.1.2600.2180, while the file that i had manually copied from the CD showed a
version of 5.1.2600.1106 and a size of 552KB.
I deleted the file from system32, but it would just come back in a couple of
seconds. I could not manually copy the "autochk.exe" file to system32. Kept
showing file exists.
Updated Mcafee, Ad-aware, and Spybot and ran all of them along with Windows
Defender - at the same time. No Viruses, trojans, etc. were found. But
Spybot popped up a security threat as "Microsoft.Windows.Security.Internet
Explorer".
Cleaned out this with Spybot and re-ran Spybot - nothing found.
So the situation still persists - any more suggestions.
MowGreen [MVP]
Value in the registry. Did you include that space ?
Every time you attempt to delete autochk.exe WFP will replace it
from WINDOWS\system32\dllcache
Did you check the copy of autochk.exe in there ?
If you're not replacing the file from a Command Prompt you're going to
keep going 'round in circles.
Both copies of autochk.exe should now be at Version 5.1.2600.2180
Please reread: http://support.microsoft.com/kb/913502
Also, suggest you run chkdsk/r as it will attempt to reparir or move
files from a bad sector. HIGHLY recommend that you create a Restore
Point prior to doing so in case you then have another issue.
That way you can boot to Safe Mode and run either Last Known Good
Configuration or Sys Restore from a Command Prompt.
How to start the System Restore tool at a command prompt in Windows XP
http://support.microsoft.com/kb/304449
MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============
Tecfield
Hi there,
Type "*sfc /revert*" in command line or run window (windows key + R),
then restart your computer; it should be OK!
--
Tecfield
------------------------------------------------------------------------
Tecfield's Profile: http://forums.techarena.in/member.php?userid=38042
View this thread: http://forums.techarena.in/showthread.php?t=811348